Privacy Policy

Privacy Policy

Version 2026-08-04.1 · Effective August 4, 2026

The short version

Design9 turns a photo of your space into redesign concepts. To do that we need your photo, and we send it to OpenAI to be processed. We keep as little as possible for as short as possible, we never sell your data, and we do not track you across other apps.

What we collect, and why

WhatWhy
Photos you uploadto generate your redesigned concepts
An account identifierto keep your projects and credits attached to you
Purchase statusto grant credits and unlock features you paid for

We do not collect your name, address or phone number.

We do not track you across other apps or websites, and show no advertising.

We do not sell or share personal data.

We also process basic technical information needed to deliver the service — such as the device's request to our servers — and error diagnostics when something fails.

Legal basis for processing

Where the GDPR or UK GDPR applies, we rely on:

How long we keep it

We keep data only as long as it is needed, and a scheduled job enforces this automatically — it is not a promise we keep by hand.

WhatHow long
The photo you uploadDeleted within 24 hours if you do not save the design. If you save it, the photo is kept as the “before” image for as long as that project exists.
Generated designsKept until you delete the project or your account.
Account and purchase recordsDeleted immediately when you delete your account.

Inspiration images you attach to a generation are deleted immediately once that generation finishes. A nightly sweep removes any uploaded or generated file that no longer belongs to a saved project.

Deleting your account removes your data from our live systems straight away. Encrypted backups roll off on their own schedule within 30 days.

Who processes your data

We use the following companies to operate Design9. Each processes data only on our instructions and under contract.

Your photo is sent to OpenAI to generate your designs. Under OpenAI's API terms, content sent through the API is not used to train their models. We do not use your photos to train any model of our own.

If we add or change a sub-processor, we update this page and the app's policy version before the change takes effect.

International transfers

NotionAce Systems - FZCO is established in the United Arab Emirates (licensed by IFZA, Dubai). Our sub-processors operate in Japan and the United States. Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) with each sub-processor.

Your rights

You can exercise all of these from inside the app, or by emailing support@design9.app. We answer within 30 days (GDPR Art. 12(3)).

for you directly.

available in the app under Me → Delete Account, and it really deletes: database rows, uploaded photos and generated images, not just a flag.

California residents (CCPA/CPRA): you have the rights above, plus the right not to be discriminated against for exercising them. We do not sell or share personal information, and we do not process it for cross-context behavioural advertising.

Complaints: you may lodge a complaint with your local supervisory authority. EU and UK residents can also contact our representative below.

Children

Design9 is not directed at children and is rated 17+. We do not knowingly collect data from anyone under 17. If you believe a child has used the app, email support@design9.app and we will delete the account.

Security

Your projects are protected by row-level security so that only your account can read them. Uploaded photos and generated images live in private storage, reachable only through short-lived signed links. Provider API keys are held server-side and never shipped in the app.

AI-generated content

Images produced by Design9 are generated by artificial intelligence. They are illustrative concepts, not photographs, and not architectural or engineering advice.

Do not rely on it for construction, structural, electrical or safety decisions.

generated image are not real quotations.

Every image in the app's catalogue — the style, space and inspiration imagery — is likewise AI-generated by us. Design9 contains no stock photography.

Who we are

Design9 is operated by NotionAce Systems - FZCO, registered at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE. We act as the data controller for the personal data described in this policy — we are responsible for deciding how and why your data is processed.

Contact: support@design9.app

EU and UK representative (GDPR Art. 27 / UK GDPR Art. 27)

For privacy questions in the EU and the UK we have appointed Prighter Group (with its local partners) as our representative under Article 27 GDPR, and Prighter Group (with its local partners) as our representative under Article 27 UK GDPR.

Prighter is your point of contact for privacy-related rights — access, erasure, correction, portability, objection and complaint. You can reach them directly through our dedicated portal: https://app.prighter.com/portal/18922560921

This is required because NotionAce Systems - FZCO is established outside the EU/UK while offering services to people within them (GDPR Art. 3(2)). These details must be publicly reachable — omitting them is a commonly enforced breach precisely because it is verifiable from this page alone.

Changes to this policy

If we change how we handle your data we will publish the new version here and raise the version number shown at the top of this page. Material changes are surfaced in the app before they take effect.